[Bug 1685561] [NEW] Please merge irssi-1.0.2-1 (main) from Debian unstable (main)

Launchpad Bug Tracker 1685561 at bugs.launchpad.net
Sat Apr 22 23:32:50 UTC 2017


You have been subscribed to a public bug by Unit 193 (unit193):

Changes since last merge:

irssi (1.0.2-1) unstable; urgency=high

  * New upstream pure bugfix release:
    - Prevent some null-pointer crashes.
    - Fix compilation with OpenSSL 1.1.0.
    - Correct dereferencing of already freed server objects during
      output of netjoins. Found by APic. (closes: #857502)
    - Fix in command arg parser to detect missing arguments in tail place.
    - Fix regression that broke incoming DCC file transfers.
    - Fix issue with escaping \ in evaluated strings.

 -- Rhonda D'Vine <rhonda at debian.org>  Sat, 11 Mar 2017 10:52:54 +0100

irssi (1.0.1-1) unstable; urgency=high

  * New upstream pure bugfix release:
    - Fix Perl compilation in object dir.
    - Disable EC cryptography on Solaris to fix build.
    - Fix incorrect HELP SERVER example.
    - Correct memory leak in /OP and /VOICE.
    - Fix regression that broke second level completion.
    - Correct missing NULL termination in perl_parse.
    - Sync broken mail.pl script.

 -- Rhonda D'Vine <rhonda at debian.org>  Mon, 06 Feb 2017 08:07:55 +0100

irssi (1.0.0-1) unstable; urgency=medium

  * New upstream release.
  * Add patch 25tls-ssl-compat-defines provided by upstream's dx for backward
    compatibility to not require modules using these functions to change code.
  * Update patch 22fix-perl-hardening.

 -- Rhonda D'Vine <rhonda at debian.org>  Sun, 08 Jan 2017 01:08:23 +0100

irssi (0.8.21-1) unstable; urgency=medium

  * New upstream security release (Closes: #850403):
    - CVE-2017-5193: NULL pointer dereference in the nickcmp function
    - CVE-2017-5194: Use-after-freee when receiving invalid nick message
    - CVE-2017-5195: Out-of-bounds read in certain incomplete control codes
    - CVE-2017-5196: Out-of-bounds read in certain incomplete character
      sequences
  * Remove patch 23fix-buf.pl which is included in upstream release.
  * Set PACKAGE_VERSION for configure as suggested by upstream.

 -- Rhonda D'Vine <rhonda at debian.org>  Thu, 05 Jan 2017 10:26:08 +0100

** Affects: irssi (Ubuntu)
     Importance: Undecided
         Status: New

-- 
Please merge irssi-1.0.2-1 (main) from Debian unstable (main)
https://bugs.launchpad.net/bugs/1685561
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.



More information about the Ubuntu-sponsors mailing list